Route Origin Authorization

$ rpki-client -vvvf rpki-repository.nic.ad.jp/ap/A91A73810000/30461/Zush7ShIuZODdoOUHFcT6yn7Y1g.roa
File:                     Zush7ShIuZODdoOUHFcT6yn7Y1g.roa (raw, json)
Hash identifier:          F/NBZX4Zb1GO+icqqe1mwwWyFdLYWY7hosHt+CU75xk=
Subject key identifier:   66:EB:21:ED:28:48:B9:93:83:76:83:94:1C:57:13:EB:29:FB:63:58
Certificate issuer:       /CN=631DAAE223AC75DA6A1635051B87AAD42C331D04
Certificate serial:       0E
Authority key identifier: 63:1D:AA:E2:23:AC:75:DA:6A:16:35:05:1B:87:AA:D4:2C:33:1D:04
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Yx2q4iOsddpqFjUFG4eq1CwzHQQ.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30461/Zush7ShIuZODdoOUHFcT6yn7Y1g.roa
Signing time:             Mon 14 Sep 2026 03:33:41 +0000
ROA not before:           Mon 14 Sep 2026 03:33:41 +0000
ROA not after:            Sun 15 Aug 2027 01:30:02 +0000
asID:                     197196
IP address blocks:        2402:6020:ff00::/47 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30461/Yx2q4iOsddpqFjUFG4eq1CwzHQQ.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30461/Yx2q4iOsddpqFjUFG4eq1CwzHQQ.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Yx2q4iOsddpqFjUFG4eq1CwzHQQ.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 24 Sep 2026 23:01:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14 (0xe)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=631DAAE223AC75DA6A1635051B87AAD42C331D04
        Validity
            Not Before: Sep 14 03:33:41 2026 GMT
            Not After : Aug 15 01:30:02 2027 GMT
        Subject: CN=66EB21ED2848B993837683941C5713EB29FB6358
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:d1:2f:29:54:fc:be:cb:dd:d3:28:f4:ca:37:
                    d6:1d:87:ab:bf:ec:94:ea:53:0c:20:ae:b7:73:22:
                    4f:a8:0b:aa:5d:c0:6d:c2:d1:1f:4e:3a:4e:9f:9a:
                    d6:8a:b8:4b:3e:58:e2:3b:29:16:74:c1:df:40:48:
                    67:ba:3b:db:9f:c2:b6:44:8d:4b:42:9d:9e:43:ea:
                    75:07:02:c8:ec:b3:92:ba:a7:90:5a:b2:d9:d7:bb:
                    7c:69:5e:c0:74:b5:18:ed:3f:a1:30:6a:1c:01:57:
                    e0:0e:0e:bd:e0:a0:6a:23:77:9f:e2:51:33:86:37:
                    f5:e1:71:13:a5:af:3f:3a:4e:3b:7d:8a:52:8c:68:
                    33:e8:08:1e:c7:e3:2f:25:4f:1b:c0:42:64:32:3b:
                    d2:40:55:c3:08:d6:b3:56:4a:30:e2:3b:ee:97:a8:
                    d6:0b:44:80:4e:9f:ff:e3:21:70:18:fd:80:c1:61:
                    52:17:f8:5e:59:52:7e:26:c2:e6:80:0c:7d:f9:ec:
                    3c:b6:88:ea:db:c2:b3:cb:38:2e:04:4e:c6:47:f3:
                    1a:28:2f:d6:ac:99:f6:64:0f:4d:d5:ee:63:73:0a:
                    ce:bf:dc:68:11:2d:31:28:27:4a:8c:9a:4b:77:c9:
                    76:cf:91:d0:83:08:33:1b:02:25:bc:8c:57:1c:bf:
                    32:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:EB:21:ED:28:48:B9:93:83:76:83:94:1C:57:13:EB:29:FB:63:58
            X509v3 Authority Key Identifier:
                keyid:63:1D:AA:E2:23:AC:75:DA:6A:16:35:05:1B:87:AA:D4:2C:33:1D:04

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30461/Yx2q4iOsddpqFjUFG4eq1CwzHQQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Yx2q4iOsddpqFjUFG4eq1CwzHQQ.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30461/Zush7ShIuZODdoOUHFcT6yn7Y1g.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2402:6020:ff00::/47

    Signature Algorithm: sha256WithRSAEncryption
         12:36:e6:87:0a:a1:6f:ee:fc:3d:59:12:3e:16:48:08:c9:27:
         88:d3:aa:3f:67:f8:94:76:00:be:02:f4:5c:99:59:66:46:3c:
         c9:f7:b7:89:32:19:dd:5f:f2:52:2f:af:30:95:1d:86:be:a9:
         7d:21:01:28:6e:f7:05:eb:44:24:6c:5f:45:8f:49:6a:49:d4:
         c8:7b:28:44:1d:4c:21:4c:4a:75:71:9e:49:d2:10:c0:c8:c8:
         83:45:e2:fb:18:5d:16:79:5c:a0:ae:79:0f:4e:c1:68:8b:ac:
         51:88:83:58:67:54:20:02:71:50:23:c7:eb:4d:37:dd:83:a5:
         d9:f4:ce:77:f5:be:8e:ee:b1:41:dc:2f:cf:3f:f2:11:c2:16:
         b5:03:f4:8d:75:c6:e8:dd:ec:84:d3:29:85:68:03:8c:b2:0d:
         21:4e:99:91:2c:a2:6e:5c:14:97:75:3c:a3:ac:19:51:2f:cd:
         63:9e:77:31:1e:79:45:92:00:09:a7:b1:c2:4a:b1:cc:9d:b0:
         96:67:91:d1:89:e0:8c:53:6e:bf:97:c6:0d:ca:aa:29:64:ce:
         f8:a5:85:d1:78:26:84:95:b8:f2:8f:53:e4:52:d8:65:1e:61:
         25:32:38:10:75:6f:a4:82:fd:51:e6:af:70:cd:58:a9:2d:f1:
         91:9d:c1:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 23:52:35 2026 by rpki-client